RE: [ws-sx] Issue 31: Token properties

> I would think that at a minimum we should look at properties 
> required to ensure the tokens can be authenticated properly 
> like in my first example.

That applies to SAML as well, i.e. SubjectConfirmation. It's meaningless to
just say "SAML token".

I would say there should be token profiles of many of these specs, if not
here, fine, but somewhere.

-- Scott